Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/599fcae6-c5f2-3b07-b7d8-1b5c8f0b7494.roa
File:                     599fcae6-c5f2-3b07-b7d8-1b5c8f0b7494.roa (raw, json)
Hash identifier:          8FazyOxbahiRbxn4roqPg1bS+Z11j0hy3wuK10MY2i0=
Subject key identifier:   2B:4A:EE:85:88:C6:12:D1:57:31:AB:E1:65:07:FE:AD:E7:A6:B6:E5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B2B91A0B63037AF5B0EB2AA80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/599fcae6-c5f2-3b07-b7d8-1b5c8f0b7494.roa
Signing time:             Fri 12 Sep 2025 13:00:42 +0000
ROA not before:           Fri 12 Sep 2025 13:00:42 +0000
ROA not after:            Thu 11 Dec 2025 14:00:42 +0000
asID:                     36618
IP address blocks:        192.12.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2b:91:a0:b6:30:37:af:5b:0e:b2:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 12 13:00:42 2025 GMT
            Not After : Dec 11 14:00:42 2025 GMT
        Subject: CN=200d9acd-2471-4f31-880d-5d520c328e3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ca:d7:45:c6:91:bd:1c:9b:03:f4:ef:b1:b2:
                    a4:09:32:db:26:d6:d4:f1:9a:dc:ba:e5:59:9c:29:
                    b9:d2:73:22:e6:15:77:92:cb:cf:0c:23:92:99:88:
                    3b:c4:40:8b:c1:b8:06:ba:28:d3:dd:59:be:f3:4e:
                    20:97:6e:95:68:65:50:c6:3e:ec:13:ad:ba:c5:57:
                    5d:85:f5:d6:79:14:bc:5a:3d:0f:b1:97:1e:99:de:
                    9d:3e:37:cf:0c:2b:7f:b2:87:3a:88:ca:20:4e:92:
                    c8:53:bf:ec:69:b1:fd:f9:27:f5:1a:62:4b:70:64:
                    02:7c:47:f3:7d:7f:c6:aa:f9:2b:63:f0:8d:c1:1d:
                    97:7d:31:74:ce:f9:a2:27:48:d2:da:35:c0:12:cf:
                    b3:69:82:fb:b0:79:3e:27:6e:e8:b0:53:69:68:a1:
                    20:40:ba:d2:6b:6a:1f:a0:60:c8:bb:2f:01:3e:a3:
                    e6:46:8d:6b:a8:da:27:48:1c:8a:b4:19:f1:6c:5a:
                    77:f9:c0:81:c7:80:eb:bd:28:5c:34:97:da:52:92:
                    f7:61:48:f2:aa:dd:44:3d:93:d5:99:31:90:07:ee:
                    67:b0:02:a2:d5:fe:f1:be:dd:27:be:64:e1:a6:31:
                    0e:f8:f9:fb:88:08:5e:e2:ba:ce:fd:9a:ee:61:37:
                    76:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:4A:EE:85:88:C6:12:D1:57:31:AB:E1:65:07:FE:AD:E7:A6:B6:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/599fcae6-c5f2-3b07-b7d8-1b5c8f0b7494.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:7b:63:ac:5c:84:62:d2:b3:56:19:ba:c7:38:fe:31:2e:73:
         76:d6:f7:6b:aa:02:09:26:c5:5c:7e:f3:90:32:92:22:44:70:
         3c:f0:22:40:05:bf:4c:cb:7f:be:19:8f:bb:0c:3b:0e:9b:9c:
         ac:cf:d9:76:3e:ad:0a:8f:32:e1:33:86:d3:29:c1:5c:7f:b1:
         44:71:a2:8f:84:11:40:18:cd:88:db:a8:87:0e:bf:88:17:fa:
         2e:f4:9d:0b:e3:f1:26:35:f4:45:a5:5e:af:35:0d:8e:af:65:
         44:4f:53:8c:0a:7f:4b:20:ac:00:f5:94:f7:83:00:2d:52:65:
         5e:df:d9:bc:ed:c5:a6:7e:16:7c:e3:2e:5c:7c:6b:80:3e:e5:
         3b:e6:2d:99:ea:7e:9f:bb:36:e6:c4:fd:de:f7:96:b4:58:6b:
         6c:73:cf:56:f2:a4:38:17:35:bf:fe:82:a3:73:79:23:fe:07:
         f2:63:78:70:62:37:c7:37:ac:85:b3:06:62:21:11:96:b6:28:
         44:55:c6:7c:bf:5a:82:51:22:bd:40:29:98:2c:aa:08:35:0e:
         89:f4:f2:49:bc:14:00:04:23:10:64:3e:f1:c5:2e:66:c7:ee:
         a6:8f:4b:63:e7:24:f0:02:56:5c:f6:77:97:0c:92:37:51:0d:
         d7:3a:cb:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:06:01 2025 by rpki-client